This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa
File:                     323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa (raw, json)
Hash identifier:          9qOZHa21rgwI1dnCb7B9nBYn6je4ggvy47WxfX9OHl4=
Subject key identifier:   9E:34:83:79:B7:37:0F:D4:D5:B5:CA:2C:9B:79:78:FB:4B:EB:9B:36
Certificate issuer:       /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Certificate serial:       165A035FC76D61F502FA58D3AE2AD16F692DEE03
Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa
Signing time:             Tue 06 Jan 2026 19:45:08 +0000
ROA not before:           Tue 06 Jan 2026 19:40:08 +0000
ROA not after:            Tue 05 Jan 2027 19:45:08 +0000
asID:                     266848
IP address blocks:        2801:12:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5a:03:5f:c7:6d:61:f5:02:fa:58:d3:ae:2a:d1:6f:69:2d:ee:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
        Validity
            Not Before: Jan  6 19:40:08 2026 GMT
            Not After : Jan  5 19:45:08 2027 GMT
        Subject: CN=9E348379B7370FD4D5B5CA2C9B7978FB4BEB9B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:88:e6:21:a9:ed:ad:25:07:30:c6:ff:36:20:
                    7a:f2:78:48:65:c2:1d:95:c7:45:6d:5c:0c:c8:8f:
                    d6:3c:51:3c:4f:fb:73:4d:36:e7:3c:2d:2e:06:03:
                    51:08:12:90:74:f2:42:14:a1:6f:2d:d1:6f:b1:59:
                    96:ff:1f:a9:c2:d3:9c:e6:73:3c:94:a6:d4:d1:8d:
                    cd:c6:ea:9d:32:dd:2d:89:c1:31:9f:a3:75:05:ba:
                    3e:e0:0f:ba:53:96:c1:99:17:5b:80:09:73:90:74:
                    7f:9f:24:a8:76:bb:93:b9:fb:90:44:b6:82:a6:4b:
                    b1:4e:ae:62:5a:68:79:41:9f:6a:e4:15:4b:90:d0:
                    ae:e2:f7:8b:30:4c:9c:e9:c7:69:a5:80:72:e6:fc:
                    9c:31:95:ca:5b:f8:80:3c:85:6d:93:81:d3:1d:44:
                    85:4b:a3:af:e7:c5:f8:e3:2b:98:6f:66:70:89:58:
                    7b:75:ac:dc:6e:15:16:06:ac:3c:92:8f:60:44:cc:
                    d7:9a:19:c6:ef:8b:b5:c6:07:76:9b:10:a7:15:16:
                    d3:6a:a9:ec:21:22:61:48:ac:12:ec:8b:38:ea:09:
                    9a:2b:40:99:81:97:26:5f:47:f3:e2:ac:d8:26:ca:
                    7e:08:53:c3:c7:0b:ae:64:91:b1:7f:cd:43:de:8b:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:83:79:B7:37:0F:D4:D5:B5:CA:2C:9B:79:78:FB:4B:EB:9B:36
            X509v3 Authority Key Identifier:
                keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:1f:f8:b9:63:de:f0:3c:a8:0f:37:4c:78:ab:37:63:d1:ab:
         bc:96:0a:d7:24:21:51:ba:12:c1:2c:18:fa:7a:36:58:28:e9:
         b9:6b:59:6f:f7:74:86:44:ae:80:f7:ad:33:6f:29:04:ef:63:
         5d:c0:b1:e7:a1:ec:0c:0b:12:1a:a0:ed:17:7a:f0:83:7c:4f:
         e0:bf:2b:5a:e0:5a:37:06:26:66:81:29:14:ab:34:81:27:16:
         a0:74:01:c4:55:19:fc:d9:e5:d0:86:de:79:28:c2:5d:e7:69:
         fa:7c:46:d4:fb:93:29:47:c5:bb:fb:f0:ae:86:5a:2c:fb:73:
         e6:1c:81:7e:e2:b5:98:9c:7c:5a:04:37:de:8b:82:83:46:f5:
         33:ed:0e:56:36:e7:5c:5e:18:ca:80:56:52:62:a5:16:79:67:
         eb:87:9f:24:99:a3:44:20:42:a5:03:e3:ad:89:42:f0:68:08:
         24:59:c6:5a:78:ae:2f:ef:fa:0a:14:38:38:41:73:cd:c4:0c:
         17:3b:cd:0f:d0:d1:f6:6f:21:1e:2f:47:4b:6b:ca:f3:d1:a8:
         74:da:ba:0c:0c:f8:57:9c:44:17:1d:07:b3:6d:4a:44:79:72:
         71:33:f6:18:3b:8e:79:58:f7:a2:9a:b2:cd:aa:6c:f5:8a:69:
         68:57:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:08:23 2026 by rpki-client